Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/8cT7WS15aJHW_Lw5VQykq0hiDto.roa
File:                     8cT7WS15aJHW_Lw5VQykq0hiDto.roa (raw, json)
Hash identifier:          JPwHbs1sU2WE86rSG4nAEC4TXJlwxCnnYPF/gOMuBgQ=
Subject key identifier:   F1:C4:FB:59:2D:79:68:91:D6:FC:BC:39:55:0C:A4:AB:48:62:0E:DA
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       0CBD
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/8cT7WS15aJHW_Lw5VQykq0hiDto.roa
Signing time:             Wed 29 Sep 2021 02:50:12 +0000
ROA not before:           Wed 29 Sep 2021 02:50:12 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     131628
IP address blocks:        175.99.224.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3261 (0xcbd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Sep 29 02:50:12 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=F1C4FB592D796891D6FCBC39550CA4AB48620EDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:1c:bd:26:a3:36:8d:d1:52:db:b7:d1:6c:89:
                    df:6e:94:64:73:d3:ca:ec:4a:02:7f:f5:5c:90:31:
                    ea:3a:c2:0f:f9:b3:77:2a:bf:88:cd:b1:9e:9b:55:
                    8b:fd:4d:e7:94:1b:7f:ad:a8:97:8a:3f:13:8b:12:
                    d2:f0:c7:fe:22:17:95:71:60:01:c6:07:7d:11:1b:
                    90:71:f8:a8:f4:88:44:7b:05:f8:da:6d:c5:74:83:
                    2f:04:13:a8:53:d4:f0:33:7e:69:b3:65:9f:39:d6:
                    f1:69:3b:3f:59:da:61:39:4b:74:08:ff:ee:4e:ae:
                    61:0a:0c:d8:27:57:f2:58:c3:5e:64:a2:be:43:b7:
                    01:7b:aa:60:8c:32:30:b7:67:57:b6:31:31:06:4f:
                    07:4e:c7:2a:4f:83:a3:b9:7c:0c:33:c2:bd:93:91:
                    d6:ae:8c:d1:c3:b7:61:2c:08:f3:23:01:e3:c2:f9:
                    ec:62:b1:aa:2a:65:c5:dd:44:83:66:d1:68:bd:29:
                    f4:86:cf:12:b4:4b:47:85:3c:f5:de:34:1d:76:fc:
                    3f:bd:d9:46:2c:dc:f4:d7:db:a7:da:41:36:8b:16:
                    5c:1d:dd:84:83:ed:fb:92:e6:49:c3:1a:3d:7b:ed:
                    ff:9c:dd:4e:30:a0:69:c1:c1:b9:69:00:8b:03:90:
                    0a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:C4:FB:59:2D:79:68:91:D6:FC:BC:39:55:0C:A4:AB:48:62:0E:DA
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/8cT7WS15aJHW_Lw5VQykq0hiDto.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.99.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:7a:64:45:7e:4c:3c:54:98:fb:63:ca:8c:2d:66:51:56:14:
         5c:ea:15:7c:6d:d4:e1:e1:38:53:72:fc:4e:29:4c:b2:1b:ff:
         5e:f3:9c:ca:f4:d0:09:54:7e:32:07:a9:1a:7d:77:86:82:82:
         a5:a3:7a:95:97:36:b5:df:fe:73:4a:05:dc:6f:18:89:cb:b5:
         eb:ce:24:e6:9a:22:0c:ad:75:6a:8c:52:bd:96:c1:b0:87:d2:
         7e:f6:fa:d7:b3:7a:c3:9b:35:bf:14:90:c4:c0:a3:c4:ad:36:
         0c:e8:83:6c:22:0f:06:b2:96:52:0c:4e:26:12:33:32:17:0f:
         ac:fd:9c:98:84:69:0d:cd:bf:71:3f:28:39:bd:54:88:b6:fe:
         88:c0:ea:a2:03:c7:71:2b:0e:c7:2d:a9:43:e5:d3:e9:f6:7e:
         b1:4c:e5:d2:ea:c3:c7:47:7c:39:ac:f1:26:53:8d:1a:c3:5d:
         e7:6f:d0:0d:48:b2:b5:b8:95:8d:1e:5c:0b:e3:49:48:58:b9:
         95:8b:f3:49:f2:2a:a3:5b:44:ba:7e:fe:49:3c:a5:20:07:76:
         4c:f6:e3:4b:1d:ea:40:d7:35:67:2a:be:5d:13:b0:e5:2f:af:
         14:23:fe:30:20:b0:48:7b:dc:cd:6e:62:8d:08:d7:b0:87:d9:
         94:d0:b9:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----